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DETAILED ACTION 

1 . This action is responding to application papers filed on 7-11-2003. 

2. Claims 1, 3 - 7, 9, 10, 18 -27 are pending. Claims 1, 2, 3, 10, 11, 12, 13, 15 
have amended. Claims 2, 8, 11 - 15 have been cancelled. Claims 1, 11, 15, 16, 17, 
18 are independent. 

Response to Arguments 

3. Applicant's arguments filed 6/18/2008 have been fully considered but they are not 
persuasive. 

Applicant has removed the unsupported "totality" of applications claim limitation 
and reinstated the previous "plurality" of applications claim limitation. The Schaeck 
prior art discloses a view or display consisting of a plurality of applications or multiple 
applications, (see Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 4-8: 
view list of multiple or plurality of accessible services or applications; paragraph [0044] 
lines 1-4: user actions, accessible by the user) 

3.1 Applicant argues that the referenced prior art does not disclose, a separate 
hardware device, (see Remarks Page 1 1 ) 

There is no disclosure for a separate hardware device in the specification or the 
original claims. See the 1 12 rejection. 
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3.2 Applicant argues that the referenced prior art does not disclose, a consolidated 
view, (see Remarks Page 12) 

The Delany prior art discloses a consolidated view for the set of available 
applications, (see Delany paragraph [0113], lines 13-18, paragraph [0129], lines 16-20: 
LDAP, consolidated user based directory information) 

3.3 Applicant argues the previous 112 rejection, (see Remarks Page 13-16) 

The terms "list of keys"; "list of applications"; "serial number", "last login attempt" 
were indicated in Figure 7 and are addressed in the Office Action, (see Remarks Pages 
13-16) 

Claim Rejections - 35 USC § 112 

4. The previous 112 rejection has been withdrawn. And, a new 112 rejection has 
been entered. 

5. The following is a quotation of the first paragraph of 35 U.S. C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

6. Claims 1, 16, 17, 21 -27 are rejected under 35 U.S.C. 112, first paragraph, as 
failing to comply with the written description requirement. The ciaim(s) contains subject 
matter which was not described in the specification in such a way as to reasonably 
convey to one skilled in the relevant art that the inventor(s), at the time the application 
was filed, had possession of the claimed invention. 
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In amended Claims 1, 18, 17, there is no disclosure of the term, "coupling" or 
"separate", or disclosure for the amended claim limitation: "coupling of a separate 
hardware security device", in the specification or the original claims. 

Appropriate correction is required. 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

8. Claims 1,3-7, 9, 10, 18-27 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Schaeck et al. (US Patent No. 20030163513) in view of Cotte (US 
PGPUB No. 20040013132) and further in view of Delany et al. (US PGPUB No. 
20020138763). 

With Regards to Claims 1,11,15, Schaeck discloses a method, apparatus for 
providing a system administrator with a view of a totality of application accessible by a 
user, comprising: 

a) receiving, in response to a coupling of a separate hardware security device to the 
data processing system, credential information for each application of the 
plurality of applications that the user uses from the separate hardware security 
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device into an authentication credential container associated with the user: (see 
Schaeck paragraph [0022], lines 1-3: profile or credentials container, credential 
information; no disclosure of a separate hardware device) 

b) identifying the plurality of applications (see Schaeck paragraph [0037], lines 1-5: 
service equivalent to application; paragraph [0066], lines 5-10: aggregation of 
services or applications) accessible by a user by examining the authentication 
credential container associated with the user; (see Schaeck paragraph [0066], 
lines 1-5, paragraph [0081], lines 1-11: examine user authentication credentials; 
paragraph [0022], lines 1-3: profile or credentials container) and 

d) a view of displayer to display the view of the plurality of applications accessible 
by the user to the administrator, (see Schaeck paragraph [0043], lines 5-7; 
paragraph [0068], lines 4-8: view list of multiple or plurality of accessible services 
or applications; paragraph [0045], lines 7-12: role of administrator, view of 
application (i.e. services)) 

Schaeck discloses wherein generating a view of the plurality of applications 
accessible by the user, (see Schaeck paragraph [0043], lines 5-7; paragraph [0068], 
lines 4-8: view list of multiple or plurality of accessible services or applications; 
paragraph [0044], lines 1-4: user actions, accessible by the user) Schaeck does not 
specifically disclose a consolidated user directory. 
However, Delany discloses: 

c) a consolidated user directory that contains user authentication information across 
the plurality of applications , (see Delany paragraph [0113], lines 13-18, 
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paragraph [0129], lines 16-20: LDAP, consolidated user based directory 
information) 

It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck to enable a consolidated directory of the plurality of the applications as 
taught by Delany. One of ordinary skill in the art would have been motivated to 
employ the teachings of Delany in order to, within a consolidated view or a single 
source, enable the addition and removal of directory entry attributes for an existing 
group, (see Delany paragraph [0014], lines 4-7: "... Over time, an administrator 
may discover that using a dynamic membership rule is a mistake for this group 
because the number of members is growing too fast. ... "; paragraph [001 4], lines 
10-14: "... since the group has already been created and used, prior systems do not 
aiiow for the modification of the group by removing the attribute for storing a dynamic 
membership ruie. . . . ") 

Schaeck-Delany does not specifically disclose a complete listing of applications. 
However, Cotte discloses a complete listing of applications for: a); b); c); (see Cotte 
paragraph [0116], lines 1-7: total number of application possible) 

It would have been obvious to one of ordinary skill in the art to modify Schaeck- 
Delany for a complete listing of applications as taught by Cotte. One of ordinary skill 
in the art would have been motivated to employ the teachings of Cotte in order to 
enable the capability to realizing advantages, such as privacy, ease of use, and/or 
data communications capabilities, offered by available communications 
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environments, (see Cotte paragraph [0022], lines 1-5: "... The present invention 
may be employed to overcomes disadvantages existing in known communications 
environments while realizing advantages, such as privacy, ease of use, and/or data 
communications capabilities, offered by available communications environments....") 

With Regards to Claims 3, 13, Schaeck discloses the method, apparatus of claims 1 , 
1 1 further comprising providing an interface to assist in removing access to an 
application from the pjuraijty of the applications by utilizing the view of the plurality of the 
applications accessible by the user, (see Schaeck paragraph [0043], lines 5-7; 
paragraph [0068], lines 4-8: view list of multiple or plurality of accessible services or 
applications; paragraph [0043], lines 9-15: delete or remove access to a service or 
application) 

Schaeck does not specifically disclose a complete listing of applications. However, 
Cotte discloses a complete listing of applications, (see Cotte paragraph [0116], lines 1- 
7: total number of application possible) 

It would have been obvious to one of ordinary skill in the art to modify Schaeck for 
a complete listing of applications as taught by Cotte. One of ordinary skill in the art 
would have been motivated to employ the teachings of Cotte in order to enable the 
capability to realizing advantages, such as privacy, ease of use, and/or data 
communications capabilities, offered by available communications environments, (see 
Cotte paragraph [0022], lines 1-5) 
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With Regards to Claim 4, Schaeck discloses the method, apparatus of claim 1 , further 
comprising: 

wherein the user utilizing the generated view, (see Schaeck paragraph [0043], lines 
5-7; paragraph [0068], lines 4-8: view list of multiple or plurality of accessible 
services or applications), and injecting authentication information of the user account 
into the authentication credential container of the user, (see Schaeck paragraph 
[0052], lines 11-15: script program utilizing in the processing of authentication 
information, authentication information placed or "injected" within authentication 
process via script technology) Schaeck does not specifically disclose creating a 
user account for a new application to be accessible by the user. 
However, Delany discloses: 

a) creating a user account for a new application to be accessible by the user; (see 
Delany paragraph [0108], lines 1-8; paragraph [0109], lines 12-16: create user 
accounting information) and 

b) authentication information of the user account into the authentication credential 
container of the user, (see Delany paragraph [0108], lines 1-8; paragraph [0109], 
lines 12-16: create user accounting information) 

It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck such that the authentication credential container is stored at a server as 
taught by Delany. One of ordinary skill in the art would have been motivated to 
employ the teachings of Delany in order to, within a single source or consolidate 
view, enable the addition and removal of user accounting and authentication 
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attributes for an existing group using a server or a centralized source, (see Delany 
paragraph [0014], lines 4-7; paragraph [0014], lines 10-14) 

With Regards to Claim 5, Schaeck discloses the method of claim 4 wherein the 
authentication credential container and a server, (see Schaeck paragraph [0066], lines 
1-5, paragraph [0081], lines 1-11: examine user authentication credentials; paragraph 
[0051], lines 1-6; paragraph [0075], lines 1-4: authentication server system; paragraph 
[0022], lines 1-3: profile or credentials container) Schaeck does not specifically disclose 
wherein the authentication credential container stored at a server. However, Delany 
discloses wherein authentication credential container is stored at a server, (see Delany 
paragraph [0128], lines 1-3; paragraph [0129], lines 1-4: database manager, profile or 
authentication information under control of directory server and database server) 
It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck such that the authentication credential container is stored at a server as taught 
by Delany. One of ordinary skill in the art would have been motivated to employ the 
teachings of Delany in order to enable, within a single source or a consolidate view from 
a server, centralized access to user accounting and authentication attributes for an 
existing group, (see Delany paragraph [0014], lines 4-7; paragraph [0014], lines 10-14) 

With Regards to Claim 6, Schaeck discloses the method of claim 3 wherein the 
removing is performed automatically, (see Schaeck paragraph [0044], lines 1-10: data- 
oriented or presentation interface, data-oriented interface designates an automatic 
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interface between client and server; paragraph [0043], lines 9-15: delete or remove 
access to a service or application) 

With Regards to Claim 7, Schaeck discloses the method of claim 4 wherein 
processing user account information is performed either automatically or manually by an 
administrator , (see Schaeck paragraph [0044], lines 1-10: data-oriented or presentation 
interface, data-oriented interface designates an automatic interface) Schaeck does not 
specifically disclose the creation of a user account. However, Delany discloses wherein 
creating the user account, (see Delany paragraph [0108], lines 1-8; paragraph [0109], 
lines 12-16: create user accounting information) 

It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck to create the user account as taught by Delany. One of ordinary skill in the art 
would have been motivated to employ the teachings of Delany in order to enable the 
utilization of multiple methods, such as a manual or an automatic method, for the 
update of user attributes, (see Delany paragraph [0014], lines 4-7; paragraph [0014], 
lines 10-14) 

With Regards to Claim 9, Schaeck discloses the method of claim 4 wherein the 
authentication information is injected into the separate hardware security device, (see 
Schaeck paragraph [0052], lines 11-15: script program utilizing in the processing of 
authentication information, authentication information placed or "injected" within 
authentication process via script technology) Schaeck does not specifically disclose 
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creating a user account for a new application to be accessible by the user. However, 
Delany discloses wherein creating a user account, (see Delany paragraph [0108], lines 
1-8; paragraph [0109], lines 12-16: create user accounting information ; there is no 
disclosure of a separat e hardware device) 

It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck to creating a user account as taught by Delany. One of ordinary skill in the art 
would have been motivated to employ the teachings of Delany in order to enable the 
utilization of multiple methods, such as an automatic or script technology method for the 
update of user attributes, (see Delany paragraph [0014], lines 4-7; paragraph [0014], 
lines 10-14) 

With Regards to Claim 10, Schaeck discloses the method of claim 1 further comprising 
user directories for each application of the plurality of the applications accessible by the 
user, (see Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 4-8: view list of 
multiple or plurality of accessible services or applications) Schaeck does not 
specifically disclose removing individual directories for each application. However, 
Delany disclose wherein removing individual user directories for each application, (see 
Delany paragraph [0108], lines 1-8; paragraph [0109], lines 12-16: delete or remove 
user accounting information or user directories) 

It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck to enable removing individual user directories for each application as taught by 
Delany. One of ordinary skill in the art would have been motivated to employ the 
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teachings of Delany in order to enable, within a single source or consolidate view, 
enable the addition and removal of user accounting and authentication attributes for an 
existing group using a centralized source, (see Delany paragraph [0014], lines 4-7; 
paragraph [0014], lines 10-14) 

With Regards to Claim 18, Schaeck discloses a method for providing a system 
administrator with a consolidated directory of a plurality of applications accessible by a 
user, the method comprising: 

a) identifying the plurality of applications accessible by the user by examining 
authentication credential container of the user; (see Schaeck paragraph [0043], 
lines 5-7; paragraph [0068], lines 4-8: view list of multiple or plurality of 
accessible services or applications; paragraph [0045], lines 7-12: role of 
administrator, view of application (i.e. services)) 

b) generating a directory of the plurality of applications accessible by the user; (see 
Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 4-8: view list of 
multiple or plurality of accessible services or applications; paragraph [0045], lines 
7-12: role of administrator, view of application (i.e. services)); and 

c) displaying the directory to the administrator; ((see Schaeck paragraph [0043], 
lines 5-7; paragraph [0068], lines 4-8: view list of multiple or plurality of 
accessible services or applications; paragraph [0045], lines 7-12: role of 
administrator, view of application (i.e. services))) 

the directory comprising: 
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d) a name of the user; (see Schaeck paragraph [0059], lines 16-24: userid (i.e. 
other credentials), password) 

f) a profile of the user detailing a role of the user, a name of the user, an email 
address of the user, a department of the user, an employee ID of the user, and 
any additional attributes of the user that have been specified; (see Schaeck 
paragraph [0108], lines 1-8; paragraph [0109], lines 12-16: process user profile 
information, account, role of user, administrator) 

k) a list of personal applications accessible by the user also specifying a number of 
accounts connected to each personal application; (see Schaeck paragraph 
[0043], lines 5-7; paragraph [0068], lines 4-8: view list of multiple or plurality of 
accessible services or applications (personal application is still an application)) 

Schaeck does not specifically disclose a complete listing of applications. However, 
Cotte discloses a complete listing of applications for: a); b); (see Cotte paragraph 
[0116], lines 1-7: total number of application possible) 

It would have been obvious to one of ordinary skill in the art to modify Schaeck 
for a complete listing of applications as taught by Cotte. One of ordinary skill in the 
art would have been motivated to employ the teachings of Cotte in order to enable 
the capability to realizing advantages, such as privacy, ease of use, and/or data 
communications capabilities, offered by available communications environments, 
(see Cotte paragraph [0022], lines 1-5) 

Schaeck discloses: 
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h) a list of certificate-enabled applications accessible by the user also specifying a 
user name of the user; (see Schaeck paragraph [0043], lines 5-7; paragraph 
[0068], lines 4-8: view list of multiple or plurality of accessible services or 
applications (certificate enabled application is still an application and a service 
accessible by a user)) 

j) a list of enterprise applications accessible by the user also specifying a user 
name of the user; (see Schaeck paragraph [0043], lines 5-7; paragraph [0068], 
lines 4-8: view list of multiple or plurality of accessible services or applications 
(enterprise application is stil! an application and a service accessible by a user)) 

Schaeck does not specifically disclose a list of key information and tracking a last 
login attempt of the user. However, Delany discloses wherein a last login attempt of 
the user for corresponding entries application, (see Delany paragraph [0428], lines 
3-8; paragraph [0429], lines 4-7: authentication (login) attempts (successful and 
unsuccessful) are logged (tracked)) 

And, Delany discloses: 

e) a list of keys employed by the user also detailing the type and serial number of 
each key; (see Delany paragraph [0361], lines 1-21: public/private key and 
certificate usage, certificate serial number; paragraph [0374], II 11-14: view 
certificate information (key information and serial number)) 

g) a means of updating and resetting the profile; (see Delany paragraph [0108], 
lines 1-8; paragraph [0109], lines 12-16: update profile information) 
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i) a means of deleting the user name of the user; (see Delany paragraph [01 08], 
lines 1-8; paragraph [0109], lines 12-16: remove user profile (i.e. account) 
information) 

It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck for key and certification information such as serial number, to enable a last 
login attempt, and the processing of user profile (i.e. user account) information as 
taught by Delany. One of ordinary skill in the art would have been motivated to 
employ the teachings of Delany in order to enable, within a single source or 
consolidate view, enable the addition and removal of user accounting and 
authentication attributes for an existing group using a centralized source, (see 
Delany paragraph [0014], lines 4-7; paragraph [0014], lines 10-14) 

With Regards to Claim 19, Schaeck discloses the melhod of claim 18, further 
comprising: a specification of a password for each certificate enabled application, each 
enterprise application, and each personal application, (see Schaeck paragraph [0059], 
lines 16-24: password required for access to applications) 

With Regards to Claim 20, Schaeck discloses the consolidated directory of claim 18, 
further comprising: 

a) means for a system administrator to add one or more applications to the lists of 
the certificate enabled applications, the enterprise applications, or the personal 
applications of the user; (see Schaeck paragraph [0043], lines 13-15: add or 
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update application list) and 

b) means for a system administrator to delete one or more applications from the 

lists of the certificate enabled applications, the enterprise applications, or the 

personal applications, (see Schaeck paragraph [0043], lines 13-15: delete 

accounts) 

With Regards to Claims 21, Schaeck discloses the method of claim 1 wherein a list of 
information employed by the user. Schaeck does not specifically disclose a list of key 
information. However, Delany discloses wherein the view comprises: information of 
keys employed by the user, wherein each entry in the list corresponds to a different key 
employed by the user, and wherein each entry identifies a type of the corresponding key 
and a serial number of the corresponding key. (see Delany paragraph [0361], lines 1- 
21 : public/private key and certificate usage, certificate serial number; paragraph [0374], 
II 11-14: view certificate information (key information and serial number)) 

It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck for key and certification information such as serial number as taught by 
Delany. One of ordinary skill in the art would have been motivated to employ the 
teachings of Delany in order to enable, within a single source or consolidate view, 
enable the addition and removal of user accounting and authentication attributes for an 
existing group using a centralized source, (see Delany paragraph [0014], lines 4-7; 
paragraph [0014], lines 10-14) 
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With Regards to Claims 22, Schaeck discloses the method of claim 1 , wherein the 
view comprises: a profile of the user detailing a role of the user, a name of the user, 
contact information for the user, and employment information for the user, (see 
Schaeck paragraph [0108], lines 1-8; paragraph [0109], lines 12-16: process user profile 
information, account, role of user, administrator) 

With Regards to Cteims 23, Schaeck discloses the method of claim 1 , wherein the 
view comprises: a list of certificate-enabled applications accessible by the user, wherein 
each entry in the list corresponds to a different certificate-enabled application, and 
wherein each entry identifies a user name of the user and a last login attempt of the 
user for the corresponding certificate-enabled application, (see Schaeck paragraph 
[0043], lines 5-7; paragraph [0068], lines 4-8: view list of multiple or plurality of 
accessible services or applications (certificate enabled application is still an application 
and a service accessible by a user)) 

With Regards to Cteims 24, Schaeck discloses the method of claim 1 , wherein the 
view comprises: a list of enterprise applications accessible by the user, wherein each 
entry in the list corresponds to a different enterprise application, and wherein each entry 
identifies a user name of the user for the corresponding enterprise application, (see 
Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 4-8: view list of multiple or 
plurality of accessible services or applications (enterprise application is still an 
application and a service accessible by a user)) Schaeck does not specifically disclose 
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tracking a last login attempt of the user. However, Delany discloses wherein a last login 
attempt of the user for corresponding entries appSication. (see Delany paragraph 
[0428], lines 3-8; paragraph [0429], lines 4-7: authentication (login) attempts (successful 
and unsuccessful) are logged (tracked)) 

It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck last login attempt information as taught by Delany. One of ordinary skill in the 
art would have been motivated to employ the teachings of Delany in order to enable, 
within a single source or consolidate view, enable the addition and removal of user 
accounting and authentication attributes for an existing group using a centralized 
source, (see Delany paragraph [0014], lines 4-7; paragraph [0014], lines 10-14) 

With Regards to Claims 25, Schaeck discloses the method of claim 1 , wherein the 
view comprises: a list of personal applications accessible by the user, wherein each 
entry in the list corresponds to a different personal application, and wherein each entry 
identifies a number of accounts connected to the corresponding persona! application, 
(see Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 4-8: view list of 
multiple or plurality of accessible services or applications (personal application is still an 
application)) 

With Regards to Claims 26, Schaeck discloses the method of claim 22, wherein the 
view comprises: user selectable graphical user interface elements for invoking a 
function to update the profile and for invoking a function to reset the profile, (see 
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Schaeck paragraph [0043], lines 13-15: add or update application list; paragraph [0044], 
lines 1-10: data-oriented or presentation or user interface, presentation interface 
designates a manual interactive interface; paragraph [0066], lines 5-10: modification 
(add, update) of user profile information) 

With Regards to Claims 27, Schaeck discloses the method of claim 23, wherein the 
view comprises: a user selectable graphical user interface element for invoking a 
function to delete a user name of the user from the list of certificate-enabled 
applications, (see Schaeck paragraph [0043], lines 13-15: delete (user name) 
accounts; paragraph [0044], lines 1-10: data-oriented or presentation or user interface, 
presentation interface designates a manual interactive interface; paragraph [0066], lines 
5-10: deletion of user profile information) 

9. Claims 18, 17 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Schaeck in view of Gotte. 

With Regards to Claim 16, Schaeck discloses a method. ;n a data processing system , 
for providing a system administrator with a list of a plurality of applications accessible by 
a user, comprising: 

a) receiving, in response to a coupling of a separate hardware security device to the 
data processing system, credentiaMnformation for each application of the 
plurality of applications that the user uses from the separate hardware security 
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device into an authentication credential container associated with the user: (see 
Schaeck paragraph [0022], lines 1-3: profile or credentials container, credential 
information; no disclosure of a separate hardware device) 

b) identifying the plurality of applications accessible by the user by examining an 
authentication credential container associated with the user; (see Schaeck 
paragraph [0043], lines 5-7; paragraph [0068], lines 4-8: view list of multiple or 
plurality of accessible services or applications; paragraph [0045], lines 7-12: role 
of administrator, view of application (i.e. services)); (There is no disclosure in the 
specification or the original claims to display a totality of applications accessible. 
This is new matter and will not be addressed) 

c) generating a list of the plurality of applications accessible by the user; (see 
Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 4-8: view list of 
multiple or plurality of accessible services or applications; paragraph [0045], lines 
7-12: role of administrator, view of application (i.e. services)); (There is no 
disclosure in the specification or the original claims to display a totality of 
applications accessible. This is new matter and will not be addressed) and 

d) displaying the list to the administrator, (see Schaeck paragraph [0043], lines 5-7; 
paragraph [0068], lines 4-8: view list of multiple or plurality of accessible services 
or applications; paragraph [0045], lines 7-12: role of administrator, view of 
application (i.e. services)) 

Schaeck does not specifically disclose a complete listing of applications. However, 
Cotte discloses a complete listing of applications for: a); b); (see Cotte paragraph 
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[0116], lines 1-7: total number of application possible) 

It would have been obvious to one of ordinary skill in the art to modify Schaeck 

for a complete listing of applications as taught by Cotte. One of ordinary skill in the 

art would have been motivated to employ the teachings of Cotte in order to enable 

the capability to realizing advantages, such as privacy, ease of use, and/or data 

communications capabilities, offered by available communications environments. 

(see Cotte paragraph [0022], lines 1-5) 



With Regards to Claim 17, Schaeck discloses a method , in a data processing system, 
for providing a system administrator with a list of a plurality of applications accessible by 
a user together with any user names and passwords used in connection with those 
applications, comprising: 

a) reggMng Jn_r^ 

data p rocessin g sy stem, credential information for each appli cation of the 
plurality of app lications that the user uses from the se parate hardware security 
device into an authentication credential container associated with the user: (see 
Schaeck paragraph [0022], lines 1-3: profile or credentials container, credential 
information; no disclosure of a separate hardware device) 

b) identifying the plurality of applications accessible by the user and any user 
names and passwords used in connection with the plurality of applications by 
examining an authentication credential container associated with the user; (see 
Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 4-8: view list of 
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multiple or plurality of accessible services or applications; paragraph [0045], lines 
7-12: role of administrator, view of application (i.e. services)); 

c) generating a list of the plurality of applications accessible by the user together 
with any user names and passwords used in connection with the plurality of 
applications; (see Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 
4-8: view list of multiple or plurality of accessible services or applications; 
paragraph [0045], lines 7-12: role of administrator, view of application (i.e. 
services)); and 

d) displaying the list to the administrator, (see Schaeck paragraph [0043], lines 5-7; 
paragraph [0068], lines 4-8: view list of multiple or plurality of accessible services 
or applications; paragraph [0045], lines 7-12: role of administrator, view of 
application (i.e. services)) 

Schaeck does not specifically disclose a complete listing of applications. However, 
Cotte discloses a complete listing of applications for: a); b); (see Cotte paragraph 
[0116], lines 1-7: total number of application possible) 

It would have been obvious to one of ordinary skill in the art to modify Schaeck 
for a complete listing of applications as taught by Cotte. One of ordinary skill in the 
art would have been motivated to employ the teachings of Cotte in order to enable 
the capability to realizing advantages, such as privacy, ease of use, and/or data 
communications capabilities, offered by available communications environments, 
(see Cotte paragraph [0022], lines 1-5) 
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Conclusion 

THIS ACTION IS IVIADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action, in the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action, in no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carlton V. Johnson whose telephone number is 571- 
270-1032. The examiner can normally be reached on Monday thru Friday , 8:00 - 
5:00PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on 571-272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
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published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Nasser G Moazzami/ Carlton V. Johnson 

Supervisory Patent Examiner, Art Unit 2136 Examiner 
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